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algorithms that employ elliptical curves. In accordance with the claimed subject matter, 
attacks against the security of the key can be thwarted by randomizing intermediate values 
of calculations carried out in the implementation of the algorithm, to make them 
unpredictable. Pursuant to the invention, the calculations are made unpredictable by 
choosing a random representative of a point on the elliptic curve, on which the calculation 
is carried out. 

It is respectfully submitted that the Lopez et al. publication does not anticipate the 
claimed subject matter. There are a number of differences recited in the claims that are not 
disclosed by the reference, either explicitly or implicitly. 
Selecting a random value 

Claim 1 recites, as a first step, "drawing at random an integer X such that 
0<X<p", where p is a prime number. In rejecting the claim, the Office Action asserts 
that the Lopez publication discloses this concept, with reference to page 7, section 5.1, 
which states that two triplets (Xi, Yi, Zi) and (X2, Y2, Z2) are equivalent if there exists a 
value X in a finite field GF(2 n ) such that Xi =XX 2 , Yi =X 2 Yi and Zi =XZi. The reference 
does not teach, however, that the value for X is randomly selected. Rather, this portion of 
the publication is describing a mathematical theorem, namely if a value for X can be found 
that meets the stated condition, then the two triplets are equivalent. It does not indicate 
how the value for X is chosen. 

In particular, it does not teach that the value for X should be a randomly drawn 
integer. This is because, unlike the claimed invention, the Lopez publication is not 
concerned with countermeasures against attacks on the security of cryptographic keys. It is 
only setting forth mathematical principles, but not teaching one how to apply those 
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principles to countermeasure methods. As such, there is no need to randomly select a value 
for X in the context of the Lopez publication. 
Calculation of the point P* 

The second step recited in claim 1 is "calculating X'l=?i"2*Xl, Y'l=?i"3*Yl and 
Z'1=A*Z1 to define the coordinates of the point F = (X , 1,Y , 1,Z , 1)". In other words, the 
value XI is multiplied by the square of X, the value Yl is multiplied by the cube of XI, and 
the value Zl is multiplied by X itself, to calculate P\ With reference to this claimed subject 
matter, the Office Action refers to the Lopez publication's discussion of the above-noted 
theorem which states that Xi = AX2, Yi = X 2 Yi and Zi=XZi However, this is not the same 
calculation. In particular, the elements of the triplet are not multiplied by X 2 , X 3 and X 9 
respectively. Rather, two of the elements are multiplied by X, and one of them is multiplied 
by X 2 . Hence, a different result would be calculated. 
Calculation of the point Q 

The third step of claim 1 is "calculating an output point Q=2*P that is represented 
by projective coordinates (X2, Y2, Z2)". Thus, the randomly calculated point P' is used to 
derive the value for Q (which is used to generate the cryptographic keys). In connection 
with this element of the claim, the Office Action refers to page 8 of the Lopez publication, 
particularly its disclosure of the projective form of doubling. Again, however, it is 
respectfully submitted that the reference does not teach the claimed subject matter. It only 
discloses a mathematical principle, namely that projective coordinates can be doubled by 
means of the formula described therein. It does not disclose how to apply that formula as a 
countermeasure against attacks on the security of a cryptographic key. In particular, it does 
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not disclose that the doubling formula should be applied to a set of projective coordinates P' 
that are calculated from a randomly chosen value for X, to calculate the value for Q. 
Conclusion 

In summary, the Lopez publication fails to anticipate at least three elements of claim 
1, namely (1) the random selection of the value for X, (2) the calculation of a random 
projective point P' according to the formula set forth in the claim, and (3) the use of a 
random projective point P' to calculate the value for Q. It is respectfully submitted that the 
Lopez publication only discloses certain mathematical principles that relate to elliptic curve 
arithmetic. In particular, it discloses new algorithms for projective doubling and projective 
adding that are designed to improve the performance of systems that implement elliptic 
curve arithmetic. See sections 5.3 and 6. It does not, however, teach how to utilize those 
algorithms to thwart attacks on the security of cryptographic keys. Specifically, it does not 
disclose that the equivalence property of projective points can be used to calculate random 
values for the generation of cryptographic keys, to thereby make such calculations less 
predictable. 
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For at least the foregoing reasons, it is respectfully submitted that all pending claims 
are allowable over the prior art of record. Reconsideration and withdrawal of the rejections 
are respectfully requested. 

Respectfully submitted, 
Buchanan Ingersoll pc 
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